Evaluation and review 評估與檢討

1. By 11 December 2030, and every four years thereafter, the Commission shall submit a report on the evaluation and review of this Regulation to the European Parliament and to the Council. The reports shall be made public.

2. When carrying out the evaluations referred to in paragraph 1, the Commission shall in particular evaluate: (a) the effectiveness of the rules introduced by this Regulation, including their effects on undertakings, in particular on microenterprises and small and medium-sized enterprises; (b) the application of this Regulation to free and open-source software; (c) the timeline of the application of this Regulation, with a view to a possible reassessment of any of its rules; (d) the harmonisation of the level of cybersecurity protection of products with digital elements; (e) the application of substantial modification as defined in Article 3, point (30), in practice; (f) the functioning of market surveillance and enforcement; (g) the application of conformity assessment procedures laid down in Article 32, including in respect of harmonised standards developed in accordance with this Regulation, and the involvement of notified bodies; and where appropriate, accompany them with a legislative proposal.